Corporate Headquarters

3.
The router replaces the inside local source address of Host 10.1.1.1 with the translation entry global 
address, and forwards the packet. 
4.
Host B receives the packet and responds to Host 10.1.1.1 by using the inside global IP destination 
address (DA) 10.2.2.2.
5.
When the router receives the packet with the inside global IP address, it performs a NAT table 
lookup by using the inside global address as a key. It then translates the address to the inside local 
address of Host 10.1.1.1 and forwards the packet to Host 10.1.1.1.
6.
Host 10.1.1.1 receives the packet and continues the conversation. The router performs Steps 2 
through 5 for each packet.
This section contains the following topics:
•
Configuring Static Inside Source Address Translation
•
Verifying Static Inside Source Address Translation
10.1.1.2
Host B
10.6.7.3
10.1.1.1
Internet
Inside
Inside
interface
Outside
interface
Outside
10.1.1.2
10.1.1.1
10.2.2.3
10.2.2.2
Inside local
IP address
NAT table
Inside global
IP address
1
3
24713
SA
10.2.2.2
5
DA
10.1.1.1
SA
10.1.1.1
4
10.2.2.2
2

---

3-13
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 2—Configuring Network Address Translation
Configuring Static Inside Source Address Translation
To configure static inside source address translation, complete the following steps starting in global 
configuration mode:
The previous steps are the minimum you must configure for static inside source address translation. You 
could configure multiple inside and outside interfaces.